chore(deps-dev): bump the python-dependencies group with 2 updates#22522
chore(deps-dev): bump the python-dependencies group with 2 updates#22522dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the python-dependencies group with 2 updates: [codespell](https://github.com/codespell-project/codespell) and [ruff](https://github.com/astral-sh/ruff). Updates `codespell` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/codespell-project/codespell/releases) - [Commits](codespell-project/codespell@v2.4.2...v2.4.3) Updates `ruff` from 0.15.20 to 0.15.21 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.20...0.15.21) --- updated-dependencies: - dependency-name: codespell dependency-version: 2.4.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.15.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 8550538578
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| dev = [ | ||
| "cairosvg>=2.7.1; python_version<'3.14'", | ||
| "codespell>=2.2.6", | ||
| "codespell==2.4.3", |
There was a problem hiding this comment.
Remove the conflicting codespell pin
This dependency group still contains codespell==2.4.2 at pyproject.toml:177, so changing the earlier entry to codespell==2.4.3 makes the dev group require two mutually exclusive versions. Any uv sync that includes the dev group cannot resolve this set of requirements, blocking local and CI installs before tests run. Please replace/remove the older pin rather than adding an incompatible second constraint.
Useful? React with 👍 / 👎.
| "respx>=0.22.0", | ||
| "codespell==2.4.2", | ||
| "ruff==0.15.20", | ||
| "ruff==0.15.21", |
There was a problem hiding this comment.
Regenerate the lockfile for the Ruff bump
This changes the requested Ruff version to 0.15.21, but uv.lock still records ruff==0.15.20 in the dev group and package entry (uv.lock:4357, uv.lock:6285). The workflows I checked install with uv sync --locked (for example .github/workflows/python-tests.yaml:245), so CI will reject the stale lockfile once this pyproject change is present. Please regenerate and commit uv.lock with the dependency bump.
Useful? React with 👍 / 👎.
Bumps the python-dependencies group with 2 updates: codespell and ruff.
Updates
codespellfrom 2.4.2 to 2.4.3Release notes
Sourced from codespell's releases.
... (truncated)
Commits
57b2140Read only [tool.codespell] from TOML config (#3975)23b8d94[pre-commit.ci] pre-commit autoupdate926c4d6[pre-commit.ci] pre-commit autoupdate820a301Merge pull request #3967 from codespell-project/peternewman-patch-19fe42c9Add common misspellings for reseeve->reserve to dictionary725173c[pre-commit.ci] pre-commit autoupdate86c13ee[pre-commit.ci] pre-commit autoupdate7b9f36cBump actions/checkout from 6 to 7bcc1b80Add spelling corrections for simpe and variants.89584cc[pre-commit.ci] pre-commit autoupdateUpdates
rufffrom 0.15.20 to 0.15.21Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
3e1f636Bump 0.15.21 (#26676)4059807[ty] Infer metaclass-declared attributes on class instances (#26512)013e5d0[ty] Use a dedicated project name type (#26665)7ad39ad[ty] Avoid allocating decorated parameter names (#26666)c36f662Improve performance of rendering edits in preview mode (#26565)ad26408[ty] Gate membership narrowing on__contains__semantics (#25964)4594ca7[ty] Add variant discriminators forCodeGeneratorKind(#26659)1af03da[ty] Pydantic: Fix float conversion in unions (#26655)a004a36[ty] Handle callable classes in solver (#26090)d8ef3b0[ty] Parse all supported Google docstring sections. (#26653)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions